subject:(RBAC)

Dalhousie University

1. Khandavilli, Ambica Pawan. A MOBILE ROLE BASED ACCESS CONTROL SYSTEM USING IDENTITY BASED ENCRYPTION WITH NON-INTERACTIVE ZERO KNOWLEDGE PROOF OF AUTHENTICATION.

Degree: Master of Computer Science, Faculty of Computer Science, 2012, Dalhousie University

URL: http://hdl.handle.net/10222/14604

► Controlled access to confidential information and resources is a critical element in security systems. Role based access control (RBAC) has gained widespread usage in modern… (more)

Subjects/Keywords: NFC; RBAC; IBE

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Khandavilli, A. P. (2012). A MOBILE ROLE BASED ACCESS CONTROL SYSTEM USING IDENTITY BASED ENCRYPTION WITH NON-INTERACTIVE ZERO KNOWLEDGE PROOF OF AUTHENTICATION. (Masters Thesis). Dalhousie University. Retrieved from http://hdl.handle.net/10222/14604

Chicago Manual of Style (16^th Edition):

Khandavilli, Ambica Pawan. “A MOBILE ROLE BASED ACCESS CONTROL SYSTEM USING IDENTITY BASED ENCRYPTION WITH NON-INTERACTIVE ZERO KNOWLEDGE PROOF OF AUTHENTICATION.” 2012. Masters Thesis, Dalhousie University. Accessed February 28, 2021. http://hdl.handle.net/10222/14604.

MLA Handbook (7^th Edition):

Khandavilli, Ambica Pawan. “A MOBILE ROLE BASED ACCESS CONTROL SYSTEM USING IDENTITY BASED ENCRYPTION WITH NON-INTERACTIVE ZERO KNOWLEDGE PROOF OF AUTHENTICATION.” 2012. Web. 28 Feb 2021.

Vancouver:

Khandavilli AP. A MOBILE ROLE BASED ACCESS CONTROL SYSTEM USING IDENTITY BASED ENCRYPTION WITH NON-INTERACTIVE ZERO KNOWLEDGE PROOF OF AUTHENTICATION. [Internet] [Masters thesis]. Dalhousie University; 2012. [cited 2021 Feb 28]. Available from: http://hdl.handle.net/10222/14604.

Council of Science Editors:

Khandavilli AP. A MOBILE ROLE BASED ACCESS CONTROL SYSTEM USING IDENTITY BASED ENCRYPTION WITH NON-INTERACTIVE ZERO KNOWLEDGE PROOF OF AUTHENTICATION. [Masters Thesis]. Dalhousie University; 2012. Available from: http://hdl.handle.net/10222/14604

2. Sladić Goran. Model kontekstno zavisne kontrole pristupa u poslovnim sistemima.

Degree: 2011, University of Novi Sad

URL: https://www.cris.uns.ac.rs/DownloadFileServlet/Disertacijadisertacija.pdf?controlNumber=(BISIS)82079&fileName=disertacija.pdf&id=480&source=OATD&language=en ; https://www.cris.uns.ac.rs/record.jsf?recordId=82079&source=OATD&language=en ; http://dx.doi.org/10.2298/NS2011SLADICGORAN ; http://vbs.rs/scripts/cobiss?command=SEARCH&base=99999&select=ID=267644935

►

Kontrola pristupa odnosno autorizacija, u širem smislu, razmatra na koji način korisnici mogu pristupiti resursima računarskog sistema i na koji način ih koristiti. Ova… (more)

▼

Kontrola pristupa odnosno autorizacija, u širem smislu, razmatra na koji način korisnici mogu pristupiti resursima računarskog sistema i na koji način ih koristiti. Ova disertacija se bavi problemima kontrole pristupa u poslovnim sistemima. Tema disertacije je formalna specifkacija modela kontekstno zavisne kontrole pristupa u poslovnim sistemima koji je baziran na RBAC modelu kontrole pristupa. Uvođenjem kontekstno zavisne kontrole pristupa omogućeno je defnisanje složenijih prava pristupa koje u postojećim modelima kontrole pristupa za poslovne sisteme nije bilo moguće realizovati ili bi njihova realizacija bila komplikovana. Dati model primenljiv je u različitim poslovnim sistemima, a podržava defnisanje prava pristupa kako za jednostavne tako i za slo·zene poslovne tokove. Sistem je verifkovan na dva realna poslovna procesa pomoću razvijenog prototipa. Prikazana prototipska implementacija koja ispunjava ciljeve u pogledu funkcionalnosti postavljene pred sistem predstavlja potvrdu praktične vrednosti predloženog modela.

Access control is concerned with the way in which users can access to resources in the computer system. This dissertation focuses on problems of access control for business processes. The subject of the dissertation is a formal specification of the RBAC-based context sensitive access control model for business processes. By using a context-sensitive access control it is possible to define more complex access control policies whose implementation in existing access control models for business processes is not possible or is very complicated. The given model is applicable in diferent business systems, and supports the definition of access control policies for both simple and complex business processes. The model's prototype is verified by two case studies on real business processes. The presented prototype implementation represents a proof of the proposed model's practical value.

Advisors/Committee Members: Milosavljević Branko, Surla Dušan, Konjović Zora, Milosavljević Milan, Vidaković Milan.

Subjects/Keywords: Kontrola pristupa, kontekst, RBAC PO poslovni tokovi; Access control, context, RBAC, work°ow

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Goran, S. (2011). Model kontekstno zavisne kontrole pristupa u poslovnim sistemima. (Thesis). University of Novi Sad. Retrieved from https://www.cris.uns.ac.rs/DownloadFileServlet/Disertacijadisertacija.pdf?controlNumber=(BISIS)82079&fileName=disertacija.pdf&id=480&source=OATD&language=en ; https://www.cris.uns.ac.rs/record.jsf?recordId=82079&source=OATD&language=en ; http://dx.doi.org/10.2298/NS2011SLADICGORAN ; http://vbs.rs/scripts/cobiss?command=SEARCH&base=99999&select=ID=267644935

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Goran, Sladić. “Model kontekstno zavisne kontrole pristupa u poslovnim sistemima.” 2011. Thesis, University of Novi Sad. Accessed February 28, 2021. https://www.cris.uns.ac.rs/DownloadFileServlet/Disertacijadisertacija.pdf?controlNumber=(BISIS)82079&fileName=disertacija.pdf&id=480&source=OATD&language=en ; https://www.cris.uns.ac.rs/record.jsf?recordId=82079&source=OATD&language=en ; http://dx.doi.org/10.2298/NS2011SLADICGORAN ; http://vbs.rs/scripts/cobiss?command=SEARCH&base=99999&select=ID=267644935.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Goran, Sladić. “Model kontekstno zavisne kontrole pristupa u poslovnim sistemima.” 2011. Web. 28 Feb 2021.

Vancouver:

Goran S. Model kontekstno zavisne kontrole pristupa u poslovnim sistemima. [Internet] [Thesis]. University of Novi Sad; 2011. [cited 2021 Feb 28]. Available from: https://www.cris.uns.ac.rs/DownloadFileServlet/Disertacijadisertacija.pdf?controlNumber=(BISIS)82079&fileName=disertacija.pdf&id=480&source=OATD&language=en ; https://www.cris.uns.ac.rs/record.jsf?recordId=82079&source=OATD&language=en ; http://dx.doi.org/10.2298/NS2011SLADICGORAN ; http://vbs.rs/scripts/cobiss?command=SEARCH&base=99999&select=ID=267644935.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Goran S. Model kontekstno zavisne kontrole pristupa u poslovnim sistemima. [Thesis]. University of Novi Sad; 2011. Available from: https://www.cris.uns.ac.rs/DownloadFileServlet/Disertacijadisertacija.pdf?controlNumber=(BISIS)82079&fileName=disertacija.pdf&id=480&source=OATD&language=en ; https://www.cris.uns.ac.rs/record.jsf?recordId=82079&source=OATD&language=en ; http://dx.doi.org/10.2298/NS2011SLADICGORAN ; http://vbs.rs/scripts/cobiss?command=SEARCH&base=99999&select=ID=267644935

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Kaunas University of Technology

3. Dzedulionis, Vaidas. Prieigos teisių paskirstymas daug vartotojų turinčioje sistemoje, užtikrinant informacijos patikimumą.

Degree: Master, Informatics Engineering, 2009, Kaunas University of Technology

URL: http://vddb.laba.lt/obj/LT-eLABa-0001:E.02~2009~D_20090715_101831-73468 ;

►

Vienas iš pagrindinių dalykų programų sistemų kūrime, į kuriuos kreipiama labai daug dėmesio, yra duomenų saugumas. Daug vartotojų turinčiose sistemose, tokiose kaip įvairūs socialiniai tinklai,… (more)

▼

Vienas iš pagrindinių dalykų programų sistemų kūrime, į kuriuos kreipiama labai daug dėmesio, yra duomenų saugumas. Daug vartotojų turinčiose sistemose, tokiose kaip įvairūs socialiniai tinklai, duomenų apsaugos ir tvarkymo problemos yra itin aktualios. Sistemoje esant daugeliui registruotų vartotojų svarbu užtikrinti tam tikrą tvarką, svarbu, kad vartotojų skelbiama informacija būtų korektiška, taip pat svarbu, kad sistemos vartotojai elgtųsi pagal iš anksto nustatytas sistemos taisykles. Visiems šiems dalykams tvarkyti reikia labai daug administravimo resursų, ypač socialiniuose tinkluose esant šimtams ar tūkstančiams vartotojų, kiekvieną vartotoją sukontroliuoti yra itin sudėtinga. Šiame darbe šios problemos yra sprendžiamos panaudojant vieną iš keleto prieigos teisių valdymo modelių. Pasirinktą modelį pakoregavus buvo sukurta sistema, kurią naudojant patys sistemos vartotojai tampa ir sistemos administratoriais, ir informacijos skleidėjais. Sukurtos sistemos principas – kuo aktyvesnis vartotojas, tuo daugiau sistemos prieigos teisių jis gauna. Tačiau pats teisių paskirstymo vartotojams procesas taip pat reikalauja labai daug administravimo ir laiko sąnaudų, kadangi būtina tikrinti, kiek kuris vartotojas atliko tinkamų ar netinkamų veiksmų ir pagal tai suteikti ar atimti įvairias teises. Šioms problemoms spręsti, šiame darbe, sukuriamas patobulintas teisių paskirstymo kontrolės modelis, kuris automatizuoja teisių paskirstymą ir sumažina teisių administravimui reikalingo... [toliau žr. visą tekstą]

One of the main things in development of software systems, which receive a lot of attention, is the maintenance and security of the data. In the systems that have a lot of users such as the various social networks, data protection and management issues are highly relevant. At such a systems it is very important to ensure certain procedures, important that users post correct information and it is also important that the users of system would behave according to predetermined set of rules for the system. All these issues need to manage very large number of human resources, especially in the social networks of hundreds or thousands of users, it is difficult to control each user. In this paper all these issues are solved by using one of several access control models. After adjusting the model there was developed such a system, where simple users are becoming administrators and information publishers at the same time. System was created by the principle – the greater involvement of the user, the more system access rights it receives. However, an allocation of rights to consumers also requires a lot of administration, whereas it is necessary to verify the extent of the user, to carry out the proper or improper actions, and to grant or take away various system rights. These problems are solved in this work too, by refining model for the control of the distribution of rights, which automates the allocations of rights and at the same time this also reduces the time required by... [to full text]

Advisors/Committee Members: Stulpinas, Raimundas (Master’s degree committee chair), Motiejūnas, Kęstutis (Master’s degree session secretary), Bareiša, Eduardas (Master’s degree committee member), Butleris, Rimantas (Master’s degree committee member), Kazanavičius, Egidijus (Master’s degree committee member), Tomkevičius, Arūnas (Master’s degree committee member), Šeinauskas, Rimantas (Master’s degree committee member), Štuikys, Vytautas (Master’s degree committee member), Karčiauskas, Eimutis (Master’s thesis supervisor), Butleris, Rimantas (Master’s thesis reviewer).

Subjects/Keywords: Prieigos teisės; Prieigos kontrolė; RBAC; MAC; DAC; Access rights; Access control; RBAC; MAC; DAC

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Dzedulionis, Vaidas. (2009). Prieigos teisių paskirstymas daug vartotojų turinčioje sistemoje, užtikrinant informacijos patikimumą. (Masters Thesis). Kaunas University of Technology. Retrieved from http://vddb.laba.lt/obj/LT-eLABa-0001:E.02~2009~D_20090715_101831-73468 ;

Note: this citation may be lacking information needed for this citation format:
Author name may be incomplete

Chicago Manual of Style (16^th Edition):

Dzedulionis, Vaidas. “Prieigos teisių paskirstymas daug vartotojų turinčioje sistemoje, užtikrinant informacijos patikimumą.” 2009. Masters Thesis, Kaunas University of Technology. Accessed February 28, 2021. http://vddb.laba.lt/obj/LT-eLABa-0001:E.02~2009~D_20090715_101831-73468 ;.

Note: this citation may be lacking information needed for this citation format:
Author name may be incomplete

MLA Handbook (7^th Edition):

Dzedulionis, Vaidas. “Prieigos teisių paskirstymas daug vartotojų turinčioje sistemoje, užtikrinant informacijos patikimumą.” 2009. Web. 28 Feb 2021.

Note: this citation may be lacking information needed for this citation format:
Author name may be incomplete

Vancouver:

Dzedulionis, Vaidas. Prieigos teisių paskirstymas daug vartotojų turinčioje sistemoje, užtikrinant informacijos patikimumą. [Internet] [Masters thesis]. Kaunas University of Technology; 2009. [cited 2021 Feb 28]. Available from: http://vddb.laba.lt/obj/LT-eLABa-0001:E.02~2009~D_20090715_101831-73468 ;.

Note: this citation may be lacking information needed for this citation format:
Author name may be incomplete

Council of Science Editors:

Dzedulionis, Vaidas. Prieigos teisių paskirstymas daug vartotojų turinčioje sistemoje, užtikrinant informacijos patikimumą. [Masters Thesis]. Kaunas University of Technology; 2009. Available from: http://vddb.laba.lt/obj/LT-eLABa-0001:E.02~2009~D_20090715_101831-73468 ;

Note: this citation may be lacking information needed for this citation format:
Author name may be incomplete

Kaunas University of Technology

4. Petrauskienė, Rasa. Prieigos prie bevielio tinklo resursų valdymas panaudojant vietos informaciją.

Degree: Master, Informatics Engineering, 2011, Kaunas University of Technology

URL: http://vddb.laba.lt/obj/LT-eLABa-0001:E.02~2011~D_20110901_140213-99282 ;

►

Tobulėjant mobilioms technologijoms vietos informacija tapo svarbi prieigos valdymui. Šiame darbe analizuojamos vietos informacijos derinimo su autentifikacijos ir prieigos valdymo mechanizmais galimybės. Darbe išskirti vietos… (more)

▼

Tobulėjant mobilioms technologijoms vietos informacija tapo svarbi prieigos valdymui. Šiame darbe analizuojamos vietos informacijos derinimo su autentifikacijos ir prieigos valdymo mechanizmais galimybės. Darbe išskirti vietos informacijos įvedimo į autentifikacijos, prieigos valdymo ir atskaitomybės procesus privalumai. Pristatomas vietos informacija paremtas prieigos prie tinklo resursų valdymo modelis, kuris leidžia padidinti teisingo autentifikavimo tikimybę bei išplėsti prieigos valdymo galimybes. Suprojektuota prieigos prie bevielio tinklo valdymo sistema, pritaikyta veikti kelių aukštų pastate. Modelis yra suderinamas su OGC (Open GeoSpatial Consortium) ir Geo-RBAC (RBAC modelio išplėtimu), į jį įtraukti kitų tipų vietos informacija pagrįsti požymiai. Darbe pristatomi prieigos valdymo išplėtimai: periodiškumo algoritmas ir erdvinių požymių įvertinimo algoritmas, naudojantis susiejimo funkcijas ir įvertinantis vietos nustatymo patikimumą. Pasiūlyto prieigos valdymo modelio veikimas įvertinamas eksperimentais, nurodomi jo galimi pažeidžiamumai.

Location-based Access Control LBAC techniques allow taking users’ physical location into account when determining their access privileges. The analysis of possibilities of integrating location information into access control and authentication is provided. I show the advantages of using location information for authentication and access control. I present location-based access control model that can increase the probability of correct authentication. I design wireless LAN location-based access control system that is used in building of several floors. The model is compliant with OGC (Open GeoSpatial Consortium) and Geo-RBAC (the extent of RBAC model); it integrates other types of location-based features. I describe the periodicity algorithm of location-based access control and design the policy enforcement algorithm that uses location mapping functions and the evaluation of confidence. The model is evaluated by testing the speed of the system and computer resources used by the system. The vulnerabilities of location-based access control are discussed in the context of sniffing, highjacking, DoS and warmhole attacks.

Advisors/Committee Members: Lagzdinytė-Budnikė, Ingrida (Master’s thesis supervisor), Rimkus, Dangis (Master’s thesis reviewer).

Subjects/Keywords: Prieigos valdymas; Bevielis tinkas; Vietos informacija pagrįsta autentifikacija; Geo-RBAC; Access control; Wireless LAN; Location-based authentication; Geo-RBAC

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Petrauskienė, Rasa. (2011). Prieigos prie bevielio tinklo resursų valdymas panaudojant vietos informaciją. (Masters Thesis). Kaunas University of Technology. Retrieved from http://vddb.laba.lt/obj/LT-eLABa-0001:E.02~2011~D_20110901_140213-99282 ;

Note: this citation may be lacking information needed for this citation format:
Author name may be incomplete

Chicago Manual of Style (16^th Edition):

Petrauskienė, Rasa. “Prieigos prie bevielio tinklo resursų valdymas panaudojant vietos informaciją.” 2011. Masters Thesis, Kaunas University of Technology. Accessed February 28, 2021. http://vddb.laba.lt/obj/LT-eLABa-0001:E.02~2011~D_20110901_140213-99282 ;.

Note: this citation may be lacking information needed for this citation format:
Author name may be incomplete

MLA Handbook (7^th Edition):

Petrauskienė, Rasa. “Prieigos prie bevielio tinklo resursų valdymas panaudojant vietos informaciją.” 2011. Web. 28 Feb 2021.

Note: this citation may be lacking information needed for this citation format:
Author name may be incomplete

Vancouver:

Petrauskienė, Rasa. Prieigos prie bevielio tinklo resursų valdymas panaudojant vietos informaciją. [Internet] [Masters thesis]. Kaunas University of Technology; 2011. [cited 2021 Feb 28]. Available from: http://vddb.laba.lt/obj/LT-eLABa-0001:E.02~2011~D_20110901_140213-99282 ;.

Note: this citation may be lacking information needed for this citation format:
Author name may be incomplete

Council of Science Editors:

Petrauskienė, Rasa. Prieigos prie bevielio tinklo resursų valdymas panaudojant vietos informaciją. [Masters Thesis]. Kaunas University of Technology; 2011. Available from: http://vddb.laba.lt/obj/LT-eLABa-0001:E.02~2011~D_20110901_140213-99282 ;

Note: this citation may be lacking information needed for this citation format:
Author name may be incomplete

Colorado State University

5. Abdunabi, Ramadan. Access control framework for mobile applications, An.

Degree: PhD, Computer Science, 2013, Colorado State University

URL: http://hdl.handle.net/10217/78814

► With the advent of wireless and mobile devices, many new applications are being developed that make use of the spatio-temporal information of a user in… (more)

▼ With the advent of wireless and mobile devices, many new applications are being developed that make use of the spatio-temporal information of a user in order to provide better functionality. Such applications also necessitate sophisticated authorization models where access to a resource depends on the credentials of the user and also on the location and time of access. Consequently, traditional access control models, such as, Role-Based Access Control (RBAC), has been augmented to provide spatio-temporal access control. However, the velocity of technological development imposes sophisticated constraints that might not be possible to support with earlier works. In this dissertation, we provide an access control framework that allows one to specify, verify, and enforce spatio-temporal policies of mobile applications. Our specification of spatio-temporal access control improves the expressiveness upon earlier works by providing features that are useful for mobile applications. Thus, an application using our model can specify different types of spatio-temporal constraints. It defines a number of novel concepts that allow ease of integration of access control policies with applications and make policy models more amenable to analysis. Our access control models are presented using both theoretical and practical methods. Our models have numerous features that may interact to produce conflicts. Towards this end, we also develop automated analysis approaches for conflict detection and correction at model and application levels. These approaches rigorously check policy models and provide feedback when some properties do not hold. For strict temporal behaviour, our analysis can be used to perform a quantitative verification of the temporal properties while considering mobility. We also provide a number of techniques to reduce the state-space explosion problem that is inherent in model checkers. Furthermore, we introduce a policy enforcement mechanism illustrates the practical viability of our models and discusses potential challenges with possible solutions. Specifically, we propose an event-based architecture for enforcing spatio-temporal access control and demonstrate its feasibility by developing a prototype. We also provide a number of protocols for granting and revoking access and formally analyze these protocols in order to provide assurance that our proposed architecture is indeed secure. Advisors/Committee Members: Ray, Indrakshi (advisor), France, Robert (committee member), Ray, Indrajit (committee member), Turk, Daniel (committee member).

Subjects/Keywords: access control; access control protocol; computer security; enforcement; policy model; RBAC

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Abdunabi, R. (2013). Access control framework for mobile applications, An. (Doctoral Dissertation). Colorado State University. Retrieved from http://hdl.handle.net/10217/78814

Chicago Manual of Style (16^th Edition):

Abdunabi, Ramadan. “Access control framework for mobile applications, An.” 2013. Doctoral Dissertation, Colorado State University. Accessed February 28, 2021. http://hdl.handle.net/10217/78814.

MLA Handbook (7^th Edition):

Abdunabi, Ramadan. “Access control framework for mobile applications, An.” 2013. Web. 28 Feb 2021.

Vancouver:

Abdunabi R. Access control framework for mobile applications, An. [Internet] [Doctoral dissertation]. Colorado State University; 2013. [cited 2021 Feb 28]. Available from: http://hdl.handle.net/10217/78814.

Council of Science Editors:

Abdunabi R. Access control framework for mobile applications, An. [Doctoral Dissertation]. Colorado State University; 2013. Available from: http://hdl.handle.net/10217/78814

6. Blumberg, Joseph Frederick. Impediment sensitive-role based access control.

Degree: 2011, James Madison University

URL: https://commons.lib.jmu.edu/master201019/154

► This paper introduces a variation to the Role Based Access Control (RBAC) model called Impediment Sensitive RBAC (IS-RBAC) to be used for implantable and closely-worn… (more)

Subjects/Keywords: RBAC; role based access control; information security; InfoSec; Computer Sciences

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Blumberg, J. F. (2011). Impediment sensitive-role based access control. (Masters Thesis). James Madison University. Retrieved from https://commons.lib.jmu.edu/master201019/154

Chicago Manual of Style (16^th Edition):

Blumberg, Joseph Frederick. “Impediment sensitive-role based access control.” 2011. Masters Thesis, James Madison University. Accessed February 28, 2021. https://commons.lib.jmu.edu/master201019/154.

MLA Handbook (7^th Edition):

Blumberg, Joseph Frederick. “Impediment sensitive-role based access control.” 2011. Web. 28 Feb 2021.

Vancouver:

Blumberg JF. Impediment sensitive-role based access control. [Internet] [Masters thesis]. James Madison University; 2011. [cited 2021 Feb 28]. Available from: https://commons.lib.jmu.edu/master201019/154.

Council of Science Editors:

Blumberg JF. Impediment sensitive-role based access control. [Masters Thesis]. James Madison University; 2011. Available from: https://commons.lib.jmu.edu/master201019/154

Aristotle University Of Thessaloniki (AUTH); Αριστοτέλειο Πανεπιστήμιο Θεσσαλονίκης (ΑΠΘ)

7. Μπαλτατζής, Δημήτριος. Dynamic authorizations for secure internet applications.

Degree: 2012, Aristotle University Of Thessaloniki (AUTH); Αριστοτέλειο Πανεπιστήμιο Θεσσαλονίκης (ΑΠΘ)

URL: http://hdl.handle.net/10442/hedi/28181

►

Over recent years, with the ever-increasing availability of networks and the advancements in their underlying infrastructure, Collaborative Environments (CE) have become commonplace: hospitals participating in… (more)

▼

Over recent years, with the ever-increasing availability of networks and the advancements in their underlying infrastructure, Collaborative Environments (CE) have become commonplace: hospitals participating in a national health care system, academic institutions, public sector services that provide support to an e-democracy environment, etc. Such environments will be more popular in the near future. Organizations participating in CEs are typically autonomous, while the environment is dynamic and scalable. There are also no direct trust relationships between interacting entities in such environments. For security reasons all authorization mechanisms such as role definitions and authorization decisions, are controlled independently and dynamically by each participant organization. The conventional well-known role based access control (RBAC) model for example was designed with closed-enterprise environments in mind, where a security officer manually assigns users to roles. Thus, a user obtains a small number of roles, usually decided by predefined credentials. Such access control solutions, are however insufficient to address the more complicated CE, and are neither flexible enough nor sufficiently fine-grained for determining the permissions of participating casual users. All these factors render the manual process of user-to-role assignment both an inadequate and a formidable task which is costly and error-prone. The central thesis of this dissertation is that it is possible to automate the user-role assignment procedure by defining a role structure based on a number of distinct, measurable characteristics both organizational and functional. In our view, an adaptable and flexible definition of the role concept is therefore handy; one that could also support a role comparison methodology between roles from different organizations and provide significant flexibility for managing such issues.

Με την ανάπτυξη του ‘Ίντερνετ τα τελευταία χρόνια και την βελτίωση των δικτυακών υποδομών, τα περιβάλλοντα συνεργασίας μεταξύ ομοειδών οργανισμών αποτελούν πλέον κοινή πρακτική. Τέτοια περιβάλλοντα θα μπορούσαν να είναι, τα τριτοβάθμια εκπαιδευτικά ιδρύματα μιας χώρας, οι φορείς υγείας μιας χώρας, οι δημόσιες υπηρεσίες στα πλαίσια της ηλεκτρονικής διακυβέρνησης κλπ. Οι οργανισμοί που παίρνουν μέρος σε τέτοια περιβάλλοντα είναι αυτόνομοι ενώ το ίδιο το περιβάλλον είναι δυναμικό και κλιμακούμενο δηλ. οργανισμοί μπορούν να μπαίνουν και να αποχωρούν από το περιβάλλον συνεργασίας χωρίς αυτό να επηρεάζεται. Οι οργανισμοί αυτοί εξυπηρετούν 2 είδη χρηστών, τους τοπικούς χρήστες και τους εξωτερικούς χρήστες άλλων οργανισμών. Το πρόβλημα της εξουσιοδότησης είναι ιδιαίτερα σημαντικό. Το μοντέλο RBAC, που βασίζεται στους ρόλους είναι το πιο γνωστό μοντέλο ελέγχου προσπέλασης και θεωρούμε ότι όλοι οι συμμετέχοντες οργανισμοί κάνουν χρήση του. Η πρόταση μας βασίζεται στην παραδοχή πως με τον ορισμό μιας κοινής δομής για τους ρόλους, κοινής σε όλους τους συμμετέχοντες οργανισμούς μπορούμε στην συνέχεια να ορίσουμε ένα αλγόριθμο σύγκρισης ο…

Subjects/Keywords: Εξουσιοδοτήσεις; Διαδίκτυο; Πληροφορική; Ασφάλεια; Information; RBAC; Security; Authorization

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Μπαλτατζής, . �. (2012). Dynamic authorizations for secure internet applications. (Thesis). Aristotle University Of Thessaloniki (AUTH); Αριστοτέλειο Πανεπιστήμιο Θεσσαλονίκης (ΑΠΘ). Retrieved from http://hdl.handle.net/10442/hedi/28181

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Μπαλτατζής, Δημήτριος. “Dynamic authorizations for secure internet applications.” 2012. Thesis, Aristotle University Of Thessaloniki (AUTH); Αριστοτέλειο Πανεπιστήμιο Θεσσαλονίκης (ΑΠΘ). Accessed February 28, 2021. http://hdl.handle.net/10442/hedi/28181.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Μπαλτατζής, Δημήτριος. “Dynamic authorizations for secure internet applications.” 2012. Web. 28 Feb 2021.

Vancouver:

Μπαλτατζής �. Dynamic authorizations for secure internet applications. [Internet] [Thesis]. Aristotle University Of Thessaloniki (AUTH); Αριστοτέλειο Πανεπιστήμιο Θεσσαλονίκης (ΑΠΘ); 2012. [cited 2021 Feb 28]. Available from: http://hdl.handle.net/10442/hedi/28181.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Μπαλτατζής �. Dynamic authorizations for secure internet applications. [Thesis]. Aristotle University Of Thessaloniki (AUTH); Αριστοτέλειο Πανεπιστήμιο Θεσσαλονίκης (ΑΠΘ); 2012. Available from: http://hdl.handle.net/10442/hedi/28181

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

8. Harryson, Magnus. Language-based permissions in embedded systems .

Degree: Chalmers tekniska högskola / Institutionen för data och informationsteknik, 2020, Chalmers University of Technology

URL: http://hdl.handle.net/20.500.12380/302095

► Embedded devices connected to the Internet are at risk of being targeted by malware attacks that may either use the vulnerable devices as part of… (more)

Subjects/Keywords: Datalog; access control; FreeRTOS; RBAC; embedded system; computer science; C; macro

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Harryson, M. (2020). Language-based permissions in embedded systems . (Thesis). Chalmers University of Technology. Retrieved from http://hdl.handle.net/20.500.12380/302095

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Harryson, Magnus. “Language-based permissions in embedded systems .” 2020. Thesis, Chalmers University of Technology. Accessed February 28, 2021. http://hdl.handle.net/20.500.12380/302095.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Harryson, Magnus. “Language-based permissions in embedded systems .” 2020. Web. 28 Feb 2021.

Vancouver:

Harryson M. Language-based permissions in embedded systems . [Internet] [Thesis]. Chalmers University of Technology; 2020. [cited 2021 Feb 28]. Available from: http://hdl.handle.net/20.500.12380/302095.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Harryson M. Language-based permissions in embedded systems . [Thesis]. Chalmers University of Technology; 2020. Available from: http://hdl.handle.net/20.500.12380/302095

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Kent State University

9. Albalawi, Talal S. A NEW APPROACH TO DYNAMIC INTEGRITY CONTROL.

Degree: PhD, College of Arts and Sciences / Department of Computer Science, 2016, Kent State University

URL: http://rave.ohiolink.edu/etdc/view?acc_num=kent1460977241

► Proper access control is one of the most important issues in computer security. It consists of securing a system in the form of availability, confidentiality,… (more)

Subjects/Keywords: Computer Science; Integrity, Dynamic Integrity, Access Control, BIBA, RBAC, MAC, DAC

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Albalawi, T. S. (2016). A NEW APPROACH TO DYNAMIC INTEGRITY CONTROL. (Doctoral Dissertation). Kent State University. Retrieved from http://rave.ohiolink.edu/etdc/view?acc_num=kent1460977241

Chicago Manual of Style (16^th Edition):

Albalawi, Talal S. “A NEW APPROACH TO DYNAMIC INTEGRITY CONTROL.” 2016. Doctoral Dissertation, Kent State University. Accessed February 28, 2021. http://rave.ohiolink.edu/etdc/view?acc_num=kent1460977241.

MLA Handbook (7^th Edition):

Albalawi, Talal S. “A NEW APPROACH TO DYNAMIC INTEGRITY CONTROL.” 2016. Web. 28 Feb 2021.

Vancouver:

Albalawi TS. A NEW APPROACH TO DYNAMIC INTEGRITY CONTROL. [Internet] [Doctoral dissertation]. Kent State University; 2016. [cited 2021 Feb 28]. Available from: http://rave.ohiolink.edu/etdc/view?acc_num=kent1460977241.

Council of Science Editors:

Albalawi TS. A NEW APPROACH TO DYNAMIC INTEGRITY CONTROL. [Doctoral Dissertation]. Kent State University; 2016. Available from: http://rave.ohiolink.edu/etdc/view?acc_num=kent1460977241

10. Lacroix, Julien. Vers un cloud de confiance : modèles et algorithmes pour une provenance basée sur les contrôles d'accès : Towards a trusted Cloud : models and algorithms for a provenance based on access controls.

Degree: Docteur es, Mathématiques et informatique, 2015, Aix Marseille Université

URL: http://www.theses.fr/2015AIXM4365

►

Ce document constitue l'aboutissement de trois années de thèse. Après avoir introduit et dégagé la problématique générale se rapportant à mon sujet de thèse, à… (more)

▼

Ce document constitue l'aboutissement de trois années de thèse. Après avoir introduit et dégagé la problématique générale se rapportant à mon sujet de thèse, à savoir « comment utiliser les données de provenance pour favoriser un Cloud de confiance ? », je présente une description des concepts, modèles et langages se rapportant à ma thèse et l'état de l'art qui peut répondre en partie à cette problématique. En second lieu, je présente la solution basée sur la provenance que j'apporte aux contrôles d'accès, dans les systèmes distribués comme le Cloud : PBAC². Elle repose sur un système combinant à la fois des modèles de provenance (PROV-DM) et de contrôles d'accès (règles génériques de type RBAC avec des politiques d'embrigadement ou de réglementation). Ce système utilise un moteur d'exécution central appelé le médiateur pour renforcer la sécurité et favoriser la confiance dans le Cloud, via la vérification de règles sur une partie du graphe de provenance rétrospective qu'il a reçue. Par ailleurs, je décris l'étude que j'ai faite de trois extensions de PBAC² : (1) l'intégration de l'ontologie PROV-O et ses avantages et inconvénients quant à la taille du (sous-)graphe de provenance reçu par le médiateur ; (2) la construction de l'adaptation de PBAC² avec l'approche de sécurité qu'est la réglementation; (3) la traduction des règles PBAC² en contraintes PROV-CONSTRAINTS. De plus, PBAC² est appliqué sur un exemple réaliste propre au secteur médical. Un prototype de PBAC² et une démonstration sur des exemples concrets avec une machine locale et un système de Cloud réel illustrent la portée de ce travail. En conclusion de la thèse, je propose quatre perspectives de ce travail.

This document is the culmination of three years of thesis. Having introduced and cleared the general issue related to my thesis subject, i.e. « how to use provenance data to enforce trust in the Cloud? », I present a description of the concepts, models and languages related to my thesis and the state of the art that can partially address this issue. Secondly, I present the solution based on provenance that I bring to access controls, in distributed systems such as the Cloud: PBAC². It is based on a system combining both provenance models (PROV-DM) and access controls (generic rules of RBAC type with regimentation and regulation policies). This system uses a central execution engine denoted the mediator to enforce security and foster trust in the Cloud, via rule checking over a part of the retrospective provenance graph it received. Furthermore, I describe the study I made of three PBAC² extensions: (1) the integration of the PROV-O ontology and its pros and cons regarding the size of the (sub)graph received by the mediator; (2) the construction of the PBAC² adaptation with the regulation security approach; (3) the translation of PBAC² rules into PROV CONSTRAINTS constraints. Moreover, PBAC² is applied to a realistic example that belongs to the healthcare sector. A PBAC² prototype and a demonstration on some practical examples with a local machine…

Advisors/Committee Members: Boucelma, Omar (thesis director).

Subjects/Keywords: Cloud; Provenance; Prov; Rétrospective; Confiance; Contrôles d'accès; Rbac; Embrigadement vs réglementation; Cloud; Provenance; Prov; Retrospective; Trust; Access controls; Rbac; Regimentation vs regulation

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Lacroix, J. (2015). Vers un cloud de confiance : modèles et algorithmes pour une provenance basée sur les contrôles d'accès : Towards a trusted Cloud : models and algorithms for a provenance based on access controls. (Doctoral Dissertation). Aix Marseille Université. Retrieved from http://www.theses.fr/2015AIXM4365

Chicago Manual of Style (16^th Edition):

Lacroix, Julien. “Vers un cloud de confiance : modèles et algorithmes pour une provenance basée sur les contrôles d'accès : Towards a trusted Cloud : models and algorithms for a provenance based on access controls.” 2015. Doctoral Dissertation, Aix Marseille Université. Accessed February 28, 2021. http://www.theses.fr/2015AIXM4365.

MLA Handbook (7^th Edition):

Lacroix, Julien. “Vers un cloud de confiance : modèles et algorithmes pour une provenance basée sur les contrôles d'accès : Towards a trusted Cloud : models and algorithms for a provenance based on access controls.” 2015. Web. 28 Feb 2021.

Vancouver:

Lacroix J. Vers un cloud de confiance : modèles et algorithmes pour une provenance basée sur les contrôles d'accès : Towards a trusted Cloud : models and algorithms for a provenance based on access controls. [Internet] [Doctoral dissertation]. Aix Marseille Université 2015. [cited 2021 Feb 28]. Available from: http://www.theses.fr/2015AIXM4365.

Council of Science Editors:

Lacroix J. Vers un cloud de confiance : modèles et algorithmes pour une provenance basée sur les contrôles d'accès : Towards a trusted Cloud : models and algorithms for a provenance based on access controls. [Doctoral Dissertation]. Aix Marseille Université 2015. Available from: http://www.theses.fr/2015AIXM4365

Brno University of Technology

11. Novotný, Filip. Rozšířený bezpečnostní model operačního systému, řízení přístupu: Mandatory access control policies of operating system.

Degree: 2019, Brno University of Technology

URL: http://hdl.handle.net/11012/17403

► The subject of this paper is data protection by means access control. It compares the difference between DAC and MAC access control and describes the… (more)

Subjects/Keywords: MAC; DAC; RBAC; subjekt; objekt; identita; bezpečnostní kontext; doména; typ; role; MAC; DAC; RBAC; subject; object; identity; security context; domain; type; role

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Novotný, F. (2019). Rozšířený bezpečnostní model operačního systému, řízení přístupu: Mandatory access control policies of operating system. (Thesis). Brno University of Technology. Retrieved from http://hdl.handle.net/11012/17403

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Novotný, Filip. “Rozšířený bezpečnostní model operačního systému, řízení přístupu: Mandatory access control policies of operating system.” 2019. Thesis, Brno University of Technology. Accessed February 28, 2021. http://hdl.handle.net/11012/17403.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Novotný, Filip. “Rozšířený bezpečnostní model operačního systému, řízení přístupu: Mandatory access control policies of operating system.” 2019. Web. 28 Feb 2021.

Vancouver:

Novotný F. Rozšířený bezpečnostní model operačního systému, řízení přístupu: Mandatory access control policies of operating system. [Internet] [Thesis]. Brno University of Technology; 2019. [cited 2021 Feb 28]. Available from: http://hdl.handle.net/11012/17403.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Novotný F. Rozšířený bezpečnostní model operačního systému, řízení přístupu: Mandatory access control policies of operating system. [Thesis]. Brno University of Technology; 2019. Available from: http://hdl.handle.net/11012/17403

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Universidade Nova

12. Gummidi, Srinivasa Raghavendra Bhuvan. Smart-RBAC.

Degree: 2015, Universidade Nova

URL: http://www.rcaap.pt/detail.jsp?id=oai:run.unl.pt:10362/14568

► Generally, smart campus applications do not consider the role of the user with his/her position in a university environment, consequently irrelevant information is delivered to… (more)

Subjects/Keywords: Smart campus applications; Portlet-based application; Accountability; University environment; Content delivery; Smart-RBAC; Security goals

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Gummidi, S. R. B. (2015). Smart-RBAC. (Thesis). Universidade Nova. Retrieved from http://www.rcaap.pt/detail.jsp?id=oai:run.unl.pt:10362/14568

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Gummidi, Srinivasa Raghavendra Bhuvan. “Smart-RBAC.” 2015. Thesis, Universidade Nova. Accessed February 28, 2021. http://www.rcaap.pt/detail.jsp?id=oai:run.unl.pt:10362/14568.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Gummidi, Srinivasa Raghavendra Bhuvan. “Smart-RBAC.” 2015. Web. 28 Feb 2021.

Vancouver:

Gummidi SRB. Smart-RBAC. [Internet] [Thesis]. Universidade Nova; 2015. [cited 2021 Feb 28]. Available from: http://www.rcaap.pt/detail.jsp?id=oai:run.unl.pt:10362/14568.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Gummidi SRB. Smart-RBAC. [Thesis]. Universidade Nova; 2015. Available from: http://www.rcaap.pt/detail.jsp?id=oai:run.unl.pt:10362/14568

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

13. Andersson, Jerker. Rollbaserad åtkomstkontroll med geografisk avgränsning : En systematisk litteraturgenomgång av det befintliga kunskapstillståndet inom ämnesområdet.

Degree: Information Systems, 2015, Dalarna University

URL: http://urn.kb.se/resolve?urn=urn:nbn:se:du-18700

►

Rollbaserad åtkomstkontroll är en standardiserad och väl etablerad modell för att hantera åtkomsträttigheter i informationssystem. Den vedertagna ANSI-standarden 359-2004 saknar dock stöd för att… (more)

▼

Rollbaserad åtkomstkontroll är en standardiserad och väl etablerad modell för att hantera åtkomsträttigheter i informationssystem. Den vedertagna ANSI-standarden 359-2004 saknar dock stöd för att geografiskt avgränsa rollbehörigheter. Informationssystem som behandlar geografiska data och de senaste årens ökade spridning av mobila enheter påkallar ett behov av att sådana rumsliga aspekter diskuteras inom kontexten av rollbaserad åtkomstkontroll. Arbetet syftar till att bringa klarhet i hur det befintliga kunskapstillståndet inom ämnesområdet rollbaserad åtkomst kontroll med geografisk avgränsning ser ut, och vilka aspekter hos detta som står i behov av vidare utveckling. Genom de teoretiska referensramar som skapats vid inledande litteraturstudier har en efterföljande systematisk litteraturgenomgång möjliggjorts, där vetenskapligt material selekterats genom fördefinierade urvalskriterier. Sammanställningen och analysen av den systematiska litteraturgenomgångens resultat har i samverkan med de teoretiska referensramarna lett fram till arbetets huvudsakliga kunskapsbidrag: en områdesöversikt där ämnets state-of-the-art presenteras och en strukturerad lista över angelägna forsknings- och utvecklingsbehov inom området.

Role-based Access Control is a standardized and well established model in terms of handling access rights. However, the accepted ANSI standard 359-2004 lacks the support of geographically delimiting role authorizations. Information systems handling geographical data together with the increasing use of mobile devices call for a need to discuss such spatial aspects within the context of Role-Based Access Control. This thesis seeks to shed light on the current state of knowledge within the subject area as well as to identify aspects of it that are in need of further development. The theoretical framework conceived by the initial literature review has made the conduction of a systematic literature review possible, and the synthesis and analysis of the data together with the theoretical framework have led to the work’s contributions of knowledge: an overview of the subject where the state-of-the art in the area is presented and a structured list of desirous needs of research and development within the area of study.

Subjects/Keywords: Rollbaserad åtkomstkontroll; RBAC; geografisk avgränsning; spatial avgränsning; säkerhet; Information Systems; Systemvetenskap, informationssystem och informatik

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Andersson, J. (2015). Rollbaserad åtkomstkontroll med geografisk avgränsning : En systematisk litteraturgenomgång av det befintliga kunskapstillståndet inom ämnesområdet. (Thesis). Dalarna University. Retrieved from http://urn.kb.se/resolve?urn=urn:nbn:se:du-18700

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Andersson, Jerker. “Rollbaserad åtkomstkontroll med geografisk avgränsning : En systematisk litteraturgenomgång av det befintliga kunskapstillståndet inom ämnesområdet.” 2015. Thesis, Dalarna University. Accessed February 28, 2021. http://urn.kb.se/resolve?urn=urn:nbn:se:du-18700.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Andersson, Jerker. “Rollbaserad åtkomstkontroll med geografisk avgränsning : En systematisk litteraturgenomgång av det befintliga kunskapstillståndet inom ämnesområdet.” 2015. Web. 28 Feb 2021.

Vancouver:

Andersson J. Rollbaserad åtkomstkontroll med geografisk avgränsning : En systematisk litteraturgenomgång av det befintliga kunskapstillståndet inom ämnesområdet. [Internet] [Thesis]. Dalarna University; 2015. [cited 2021 Feb 28]. Available from: http://urn.kb.se/resolve?urn=urn:nbn:se:du-18700.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Andersson J. Rollbaserad åtkomstkontroll med geografisk avgränsning : En systematisk litteraturgenomgång av det befintliga kunskapstillståndet inom ämnesområdet. [Thesis]. Dalarna University; 2015. Available from: http://urn.kb.se/resolve?urn=urn:nbn:se:du-18700

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

KTH

14. Subedi, Harendra. Mathematical Modelling of Delegation in Role Based Access Control.

Degree: Information and Communication Technology (ICT), 2017, KTH

URL: http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-222381

► One of the most widespread access control model that assigns permissions to a user is Role Based Access Control (RBAC). The basic idea is… (more)

▼ One of the most widespread access control model that assigns permissions to a user is Role Based Access Control (RBAC). The basic idea is to limit the access to resources by using the indirection of roles, which are associated both to users and permissions. There has been research conducted with respect to clarifying RBAC and its components, as well as in creating mathematical models describing different aspects of its administrative issues in RBAC. But, till date no work has been done in terms of formalization (Mathematical Modelling) of delegation and revocation of roles in RBAC. Which provides most important extensions of the policy and provides flexibility in the user to user delegation of roles, especially in the environment where roles are organized in a hierarchy. The process allows a user with a role that is higher in the hierarchy to assign a part of the role to someone who is lower in the hierarchy or at the same level. This can be done for a limited time or permanently. The reverse process is called revocation and it consists of ending different types of delegations. This thesis has found the answer to the following research question i.e. how different mathematical Modelling for delegation and revocation of Roles in RBAC can be performed? This thesis presents different types of delegation and techniques for revocation with a comprehensive mathematical Modelling of both processes. As this can be clearly visible that this thesis objective is to derive a mathematical models for delegation and revocation of roles in RBAC policy, for deriving mathematical models formal method is applied. The mathematical models developed include grant and transfer delegation with and without role hierarchy, time based revocation, user based revocation and cascading revocation. The case scenario of an organization using RBAC is used to illustrate and clarify the mathematical models. The mathematical models presented here can serve as a starting point for developing, implementations of delegation and revocation on top of existing authorization modules based on the RBAC model.

Subjects/Keywords: Delegation; RBAC; Role; Revocation; Role Hierarchy; Formal Methods; Computer and Information Sciences; Data- och informationsvetenskap

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Subedi, H. (2017). Mathematical Modelling of Delegation in Role Based Access Control. (Thesis). KTH. Retrieved from http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-222381

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Subedi, Harendra. “Mathematical Modelling of Delegation in Role Based Access Control.” 2017. Thesis, KTH. Accessed February 28, 2021. http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-222381.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Subedi, Harendra. “Mathematical Modelling of Delegation in Role Based Access Control.” 2017. Web. 28 Feb 2021.

Vancouver:

Subedi H. Mathematical Modelling of Delegation in Role Based Access Control. [Internet] [Thesis]. KTH; 2017. [cited 2021 Feb 28]. Available from: http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-222381.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Subedi H. Mathematical Modelling of Delegation in Role Based Access Control. [Thesis]. KTH; 2017. Available from: http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-222381

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

University of Western Ontario

15. Shermin, Motahera. An Access Control Model for NoSQL Databases.

Degree: 2013, University of Western Ontario

URL: https://ir.lib.uwo.ca/etd/1797

► Current development platforms are web scale, unlike recent platforms which were just network scale. There has been a rapid evolution in computing paradigm that has… (more)

Subjects/Keywords: NoSQL; Access Control; RBAC; Document database; Security; Databases and Information Systems; Information Security

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Shermin, M. (2013). An Access Control Model for NoSQL Databases. (Thesis). University of Western Ontario. Retrieved from https://ir.lib.uwo.ca/etd/1797

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Shermin, Motahera. “An Access Control Model for NoSQL Databases.” 2013. Thesis, University of Western Ontario. Accessed February 28, 2021. https://ir.lib.uwo.ca/etd/1797.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Shermin, Motahera. “An Access Control Model for NoSQL Databases.” 2013. Web. 28 Feb 2021.

Vancouver:

Shermin M. An Access Control Model for NoSQL Databases. [Internet] [Thesis]. University of Western Ontario; 2013. [cited 2021 Feb 28]. Available from: https://ir.lib.uwo.ca/etd/1797.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Shermin M. An Access Control Model for NoSQL Databases. [Thesis]. University of Western Ontario; 2013. Available from: https://ir.lib.uwo.ca/etd/1797

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

16. Bouriche, Khalid. Gestion de l'incertitude et codage des politiques de sécurité dans les systèmes de contrôle d'accès : Managing uncertainty and encoding security policies in access control systems.

Degree: Docteur es, Informatique, 2013, Artois; Université Sidi Mohamed ben Abdellah (Fès, Maroc). Faculté des Sciences et Techniques

URL: http://www.theses.fr/2013ARTO0406

►

La présente thèse s'intéresse à coder la politique de sécurité SELinux en OrBAC et à proposer une extension de ce modèle. Nous avons commencé par… (more)

▼

La présente thèse s'intéresse à coder la politique de sécurité SELinux en OrBAC et à proposer une extension de ce modèle. Nous avons commencé par présenter l'état de l'art des différents modèles de contrôles d'accès présents dans la littérature en mettant en exergue les limites de chacun de ces modèles. Ensuite nous avons présenté le modèle OrBAC comme étant une extension du modèle RBAC, car d'une part il a apporté la notion de contexte et d'organisation et d'autre part il permet d'exprimer, en plus des permissions, des interdictions et des obligations. Ensuite, nous avons présenté la solution de sécurité SELinux qui utilise un ensemble de modèles de contrôle d'accès comme DAC, RBAC et MAC. Nous avons recensé plusieurs centaines, voire des milliers, de règles dans la politique de sécurité SELinux, ces règles peuvent concerner des décisions d'accès ou des décisions de transition. Nous avons ensuite pu coder lesdites règles en modèle OrBAC, et ce en passant par le remplissage ses tables d'entité, pour ensuite les transformer en relations OrBAC. Notre thèse a aussi rappelé les fondements de la logique possibiliste, et a ensuite apportée une amélioration importante du modèle OrBAC, il s'agit de l'introduction de l'entité priorité au niveau de chaque relation du modèle OrBAC. L'entité priorité quantifie la certitude pour qu'une entité concrète soit injectée dans l'entité abstraite correspondante, ou en cas général, le degré de certitude pour qu'une relation soit réalisée. Nous avons proposé trois modes de combinaison (pessimiste, optimiste et avancé) qui peuvent être adoptés pour déterminer la valeur de la priorité de chaque relation concrète à partir des priorités des relations abstraites correspondantes. Enfin, nous avons implémenté, via une application développé par DELPHI, le codage des règles concernant les décisions d'accès de la politique de sécurité SELinux, en modèle OrBAC tout en introduisant la notion de priorité.

This thesis focuses on encoding default-based SELinux security policy in OrBAC and propose an extension of this model. We presented the state of the art of different models of access controls present in the literature underlining the limitations of each of these models. Then we presented the model OrBAC as an extension of the RBAC model, firstly because he brought the notion of context and organization and secondly it allows expressing, in addition to permissions, prohibitions and obligation. Then we presented the SELinux security solution that uses a set of access control models such as DAC, RBAC and MAC. We identified several hundreds or even thousands of rules in SELinux security policy, these rules may be access decisions or decisions of transition. We could then encode these rules in OrBAC model, and via filling its tables of entities, then transform relations OrBAC. Our thesis also reviewed the foundations of possibilistic logic, and then made an important enlargement in OrBAC model; it's to introduce an entity called "priority" in each relationship model OrBAC. The entity "priority"…

Advisors/Committee Members: Benferhat, Salem (thesis director), Ouzaref, Mohamed (thesis director).

Subjects/Keywords: SELinux; Orbac; Fedora 14; RedHat 4; RBAC; DTE; TE; MLS; MCS; Incertitude; Possibility theory; Possibilistic logic

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Bouriche, K. (2013). Gestion de l'incertitude et codage des politiques de sécurité dans les systèmes de contrôle d'accès : Managing uncertainty and encoding security policies in access control systems. (Doctoral Dissertation). Artois; Université Sidi Mohamed ben Abdellah (Fès, Maroc). Faculté des Sciences et Techniques. Retrieved from http://www.theses.fr/2013ARTO0406

Chicago Manual of Style (16^th Edition):

Bouriche, Khalid. “Gestion de l'incertitude et codage des politiques de sécurité dans les systèmes de contrôle d'accès : Managing uncertainty and encoding security policies in access control systems.” 2013. Doctoral Dissertation, Artois; Université Sidi Mohamed ben Abdellah (Fès, Maroc). Faculté des Sciences et Techniques. Accessed February 28, 2021. http://www.theses.fr/2013ARTO0406.

MLA Handbook (7^th Edition):

Bouriche, Khalid. “Gestion de l'incertitude et codage des politiques de sécurité dans les systèmes de contrôle d'accès : Managing uncertainty and encoding security policies in access control systems.” 2013. Web. 28 Feb 2021.

Vancouver:

Bouriche K. Gestion de l'incertitude et codage des politiques de sécurité dans les systèmes de contrôle d'accès : Managing uncertainty and encoding security policies in access control systems. [Internet] [Doctoral dissertation]. Artois; Université Sidi Mohamed ben Abdellah (Fès, Maroc). Faculté des Sciences et Techniques; 2013. [cited 2021 Feb 28]. Available from: http://www.theses.fr/2013ARTO0406.

Council of Science Editors:

Bouriche K. Gestion de l'incertitude et codage des politiques de sécurité dans les systèmes de contrôle d'accès : Managing uncertainty and encoding security policies in access control systems. [Doctoral Dissertation]. Artois; Université Sidi Mohamed ben Abdellah (Fès, Maroc). Faculté des Sciences et Techniques; 2013. Available from: http://www.theses.fr/2013ARTO0406

University of Illinois – Chicago

17. Gjomemo, Rigel. An Interoperation Framework for Context-aware Access Control.

Degree: 2012, University of Illinois – Chicago

URL: http://hdl.handle.net/10027/8651

► An access control system can be defined as a set of policies, models and enforcement mechanisms that are used to restrict access to data and… (more)

Subjects/Keywords: Access Control models; Semantic Web; OWL; Description Logic; Context-aware RBAC; Role Based Access Control; Ontology Web Language

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Gjomemo, R. (2012). An Interoperation Framework for Context-aware Access Control. (Thesis). University of Illinois – Chicago. Retrieved from http://hdl.handle.net/10027/8651

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Gjomemo, Rigel. “An Interoperation Framework for Context-aware Access Control.” 2012. Thesis, University of Illinois – Chicago. Accessed February 28, 2021. http://hdl.handle.net/10027/8651.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Gjomemo, Rigel. “An Interoperation Framework for Context-aware Access Control.” 2012. Web. 28 Feb 2021.

Vancouver:

Gjomemo R. An Interoperation Framework for Context-aware Access Control. [Internet] [Thesis]. University of Illinois – Chicago; 2012. [cited 2021 Feb 28]. Available from: http://hdl.handle.net/10027/8651.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Gjomemo R. An Interoperation Framework for Context-aware Access Control. [Thesis]. University of Illinois – Chicago; 2012. Available from: http://hdl.handle.net/10027/8651

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Linköping University

18. Landberg, Fredrik. Flexible role-handling in command and control systems.

Degree: Electrical Engineering, 2006, Linköping University

URL: http://urn.kb.se/resolve?urn=urn:nbn:se:liu:diva-7880

► In organizations the permissions a member has is not decided by their person, but by their functions within the organization. This is also the… (more)

Subjects/Keywords: Command and control system; RBAC; access control; vacancy; delegation

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Landberg, F. (2006). Flexible role-handling in command and control systems. (Thesis). Linköping University. Retrieved from http://urn.kb.se/resolve?urn=urn:nbn:se:liu:diva-7880

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Landberg, Fredrik. “Flexible role-handling in command and control systems.” 2006. Thesis, Linköping University. Accessed February 28, 2021. http://urn.kb.se/resolve?urn=urn:nbn:se:liu:diva-7880.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Landberg, Fredrik. “Flexible role-handling in command and control systems.” 2006. Web. 28 Feb 2021.

Vancouver:

Landberg F. Flexible role-handling in command and control systems. [Internet] [Thesis]. Linköping University; 2006. [cited 2021 Feb 28]. Available from: http://urn.kb.se/resolve?urn=urn:nbn:se:liu:diva-7880.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Landberg F. Flexible role-handling in command and control systems. [Thesis]. Linköping University; 2006. Available from: http://urn.kb.se/resolve?urn=urn:nbn:se:liu:diva-7880

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

George Mason University

19. Xu, Min. Session-aware RBAC administration, delegation, and enforcement with XACML .

Degree: 2010, George Mason University

URL: http://hdl.handle.net/1920/5842

► An administrative role-based access control (ARBAC) model specifies administrative policies over a role-based access control (RBAC) system, where an administrative permission has the capability to… (more)

▼ An administrative role-based access control (ARBAC) model specifies administrative policies over a role-based access control (RBAC) system, where an administrative permission has the capability to modify an RBAC policy by updating permissions assigned to roles, or assigning/revoking users to/from roles. Enforcing ARBAC policies over an active access controller while some users are using protected resources may result in conflicts: a policy may be in effect in the RBAC system while being modified by an administrative operation. Towards solving this concurrency problem, this dissertation proposes a sessionaware administrative model for RBAC to manage the interactions and potential conflicts between access control evaluation and the administrative operations. Based on this model, this dissertation specifies the concurrency requirements of an ARBAC model: (1) revoke an activated role or delete an active session immediately, and (2) delay administrative operations. This dissertation introduces the concept of lock scope for a role. This captures the affected roles when the permissions granted to this role are modified due to administrative operations. Consider that eXtensible Access Control Markup Language (XACML) is the de facto language to specify access control policies for Web Services; this dissertation proposes the XACML profile for administrative RBAC (XACML-ARBAC) which is the extension of the XACML-RBAC profile with the proposed session-aware administrative model. One of the advantages of doing so is to use XACML policies to administrate XACML-RBAC policies. The XACML policy evaluation runtime is enhanced by introducing a locking manager and a special administrative policy enforcement point (A-PEP). The lock manager handles concurrency control issues that arise when enforcing the XACML-ARBAC profile. The A-PEP competes read-write locks for RBAC and ARBAC policies in conjunction with the evaluation engine of the access controller. Along with the administrative model, the fine-grained and flexible permission delegation capability of the RBAC system has obtained considerable adoption in the last decade. The OASIS technical committee published the XACML v3.0 administration and delegation profile (XACML-Admin) working draft on April 16, 2009 in order to provide policy administration and dynamic delegation services to the XACML runtime. To capture the concurrency control requirements for delegation, this dissertation further proposes that the XACML-ARBAC profile is augmented with role-based delegation, named rolebased administration and delegation XACML profile (XACML-ADRBAC). The XACMLADRBAC profile has two novel properties: scalability–it facilitates delegated permissions to a large number of users with the same permission assignment, and flexibility–it allows a delegator to delegate any subsets of permissions assigned to him/her and modify the delegated permission whenever required. Correspondingly, the proposed XACML-ARBAC enforcement mechanism is also enhanced to enforce the… Advisors/Committee Members: Wijesekera, Duminda (advisor).

Subjects/Keywords: access control; security; administration; delegation; RBAC; XACML

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Xu, M. (2010). Session-aware RBAC administration, delegation, and enforcement with XACML . (Thesis). George Mason University. Retrieved from http://hdl.handle.net/1920/5842

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Xu, Min. “Session-aware RBAC administration, delegation, and enforcement with XACML .” 2010. Thesis, George Mason University. Accessed February 28, 2021. http://hdl.handle.net/1920/5842.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Xu, Min. “Session-aware RBAC administration, delegation, and enforcement with XACML .” 2010. Web. 28 Feb 2021.

Vancouver:

Xu M. Session-aware RBAC administration, delegation, and enforcement with XACML . [Internet] [Thesis]. George Mason University; 2010. [cited 2021 Feb 28]. Available from: http://hdl.handle.net/1920/5842.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Xu M. Session-aware RBAC administration, delegation, and enforcement with XACML . [Thesis]. George Mason University; 2010. Available from: http://hdl.handle.net/1920/5842

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

George Mason University

20. Zhang, Zhixiong. Scalable Role & Organization Based Access Control and Its Administration .

Degree: 2008, George Mason University

URL: http://hdl.handle.net/1920/3110

► In Role Based Access Control (RBAC), roles are typically created based on job functions inside an organization. Traditional RBAC does not scale up well for… (more)

Subjects/Keywords: RBAC; ROBAC; Administrative ROBAC; Role Based; access control

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Zhang, Z. (2008). Scalable Role & Organization Based Access Control and Its Administration . (Thesis). George Mason University. Retrieved from http://hdl.handle.net/1920/3110

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Zhang, Zhixiong. “Scalable Role & Organization Based Access Control and Its Administration .” 2008. Thesis, George Mason University. Accessed February 28, 2021. http://hdl.handle.net/1920/3110.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Zhang, Zhixiong. “Scalable Role & Organization Based Access Control and Its Administration .” 2008. Web. 28 Feb 2021.

Vancouver:

Zhang Z. Scalable Role & Organization Based Access Control and Its Administration . [Internet] [Thesis]. George Mason University; 2008. [cited 2021 Feb 28]. Available from: http://hdl.handle.net/1920/3110.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Zhang Z. Scalable Role & Organization Based Access Control and Its Administration . [Thesis]. George Mason University; 2008. Available from: http://hdl.handle.net/1920/3110

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

21. Yangui, Rahma. Modélisation UML/B pour la validation des exigences de sécurité des règles d'exploitation ferroviaires : UML/B modeling for the safety requirements validation of railway operating rules.

Degree: Docteur es, Automatique, Génie informatique, Traitement du Signal et des Images, 2016, Ecole centrale de Lille

URL: http://www.theses.fr/2016ECLI0003

►

La sécurité est un enjeu majeur dans le cycle de développement des systèmes critiques, notamment dans le secteur du transport ferroviaire. Cette thèse vise la… (more)

▼

La sécurité est un enjeu majeur dans le cycle de développement des systèmes critiques, notamment dans le secteur du transport ferroviaire. Cette thèse vise la modélisation, la vérification et la validation des règles d'exploitation ferroviaires au regard des exigences de sécurité. Ces règles ont pour but de définir les autorisations de déplacement des trains sur des lignes ferroviaires nationales équipées du système européen de gestion du trafic ferroviaire (ERTMS). De manière analogue, on trouve les concepts liés aux autorisations dans la description des politiques de contrôle d'accès des systèmes d'information. Par conséquent, nos contributions portent sur l'adaptation d'une approche UML/B pour le contrôle d'accès des systèmes d'information afin de modéliser et de valider les règles d'exploitation ferroviaires. Dans un premier temps, nous avons adapté le modèle Role Based Access Control (RBAC) sur une étude de cas ferroviaire extraite des règles d'exploitation appliquées sur la ligne à grande vitesse LGV Est-Européenne en France. La plate-forme B4MSecure nous a permis de modéliser ces règles à l'aide d'un profil UML de RBAC inspiré de SecureUML. Ensuite, ces modèles sont transformés en des spécifications B qui ont été enrichies par des propriétés de sécurité ferroviaire et soumises à des activités de vérification et de validation formelles. Aux concepts du modèle RBAC, le modèle Organization Based Access Control (Or-Bac) introduit la notion d'organisation, au centre de ce modèle, et la notion de contexte. Nous avons donc proposé d’utiliser ce modèle en tant qu’extension du modèle RBAC dans l’optique d’une interopérabilité ferroviaire en ERTMS.

The safety is a major issue in the development cycle of the critical systems, in particular in the rail transportation sector. This thesis aims at the modeling, the verification and at the validation of the railway operating rules with regard to the safety requirements. These rules intend to define the authorizations of trains movement on national railway lines equipped with the European Rail Traffic Management System (ERTMS). In a similar way, we find the concepts of authorizations in the description of access control policies of information systems. Consequently, our contributions concern the adaptation of an UML/B approach for the access control of information systems to model and validate the railway operating rules. At first, we adapted the Role Based Access Control (RBAC) model on a railway case study extracted from the operating rules applied on the LGV-Est-Européenne line in France. The B4MSecure platform enables the modeling of these rules by means of a UML profile of RBAC inspired by SecureUML. Then, these models are transformed into B specifications. which are enhanced by railway safety properties and formally verified and validated. In addition to the concepts of the RBAC model, the Organization Based Access Control (Or-Bac) model introduces the notion of organization, in the center of this model, and the notion of context. We have therefore proposed to use…

Advisors/Committee Members: Collart-Dutilleul, Simon (thesis director), Bon, Philippe (thesis director).

Subjects/Keywords: Sécurité ferroviaire; Règles d'exploitation ferroviaires; Modélisation UML/B; Vérification formelle; Validation formelle; Modèle RBAC; Modèle Or-BAC; Railway safety; Railway operating rules; UML/B modeling; Formal verification; Formal validation; RBAC model; Or-BAC model

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Yangui, R. (2016). Modélisation UML/B pour la validation des exigences de sécurité des règles d'exploitation ferroviaires : UML/B modeling for the safety requirements validation of railway operating rules. (Doctoral Dissertation). Ecole centrale de Lille. Retrieved from http://www.theses.fr/2016ECLI0003

Chicago Manual of Style (16^th Edition):

Yangui, Rahma. “Modélisation UML/B pour la validation des exigences de sécurité des règles d'exploitation ferroviaires : UML/B modeling for the safety requirements validation of railway operating rules.” 2016. Doctoral Dissertation, Ecole centrale de Lille. Accessed February 28, 2021. http://www.theses.fr/2016ECLI0003.

MLA Handbook (7^th Edition):

Yangui, Rahma. “Modélisation UML/B pour la validation des exigences de sécurité des règles d'exploitation ferroviaires : UML/B modeling for the safety requirements validation of railway operating rules.” 2016. Web. 28 Feb 2021.

Vancouver:

Yangui R. Modélisation UML/B pour la validation des exigences de sécurité des règles d'exploitation ferroviaires : UML/B modeling for the safety requirements validation of railway operating rules. [Internet] [Doctoral dissertation]. Ecole centrale de Lille; 2016. [cited 2021 Feb 28]. Available from: http://www.theses.fr/2016ECLI0003.

Council of Science Editors:

Yangui R. Modélisation UML/B pour la validation des exigences de sécurité des règles d'exploitation ferroviaires : UML/B modeling for the safety requirements validation of railway operating rules. [Doctoral Dissertation]. Ecole centrale de Lille; 2016. Available from: http://www.theses.fr/2016ECLI0003

Universidade do Minho

22. Macedo, Ricardo Joaquim Pereira de. Reforço da privacidade através do controlo da pegada digital .

Degree: 2013, Universidade do Minho

URL: http://hdl.handle.net/1822/27853

► Atualmente existe ainda uma relação assimétrica entre os utilizadores e os fornecedores de serviços disponibilizados pela internet. É prática comum, aquando da apresentação de um… (more)

▼ Atualmente existe ainda uma relação assimétrica entre os utilizadores e os fornecedores de serviços disponibilizados pela internet. É prática comum, aquando da apresentação de um serviço, que o utilizador seja questionado sobre a aceitação, ou não, de um conjunto de políticas referentes ao uso de informação privada facultada ao fornecedor (por exemplo, a morada, o número de telefone, preferências, etc...). Geralmente os utilizadores aceitam a política com base na confiança que têm no fornecedor e/ou no contrato formal que lhes é apresentado. Os casos de violação de privacidade por parte de alguns fornecedores de serviços, vendendo ou facultando informação privada sobre os seus clientes a outros, são amplamente conhecidos e resultam em grande medida da falta de controlo que os utilizadores finais têm sobre a informação que entregam aos fornecedores. Este problema também tem grande impacto no ambiente empresarial. Quase toda a informação de uma organização é guardada em claro. Mesmo que esta seja guardada num local seguro, aqueles que conhecerem bem o sistema poderão ter indevidamente acesso a informação privada da organização. Além disto, se a organização for alvo de um ataque informático e o atacante conseguir aceder aos dados poderá consulta-los livremente. Neste trabalho propomos a implementação de um mecanismo que possibilite o envio de informações sem que o utilizador tenha necessidade de confiar no local onde as mesmas serão armazenadas, através da utilização do conceito de “sticky policies”. Através da utilização de técnicas criptográficas, é estabelecido um vínculo entre a informação cifrada e as políticas de acesso à informação. O sistema desenvolvido garante que, para um terceiro aceder às informações pessoais de um utilizador, terá que cumprir o conjunto de regras definidas pelo dono da informação. Visto que um utilizador autorizado a aceder às informações pode ter um comportamento incorreto, partilhando indevidamente as informações, propomos também adicionar mecanismos de auditoria dos acessos à informação gerida pelo sistema. Advisors/Committee Members: Almeida, José Bacelar (advisor).

Subjects/Keywords: “Sticky policies”; Sistema criptográfico; PKE; IBE; ABE; PRE; Controlo de acessos; DAC; MAC; ABAC; RBAC; Linguagem de políticas; XACML; XrML; EPAL; Cryptographic system; Access control; Policy language

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Macedo, R. J. P. d. (2013). Reforço da privacidade através do controlo da pegada digital . (Masters Thesis). Universidade do Minho. Retrieved from http://hdl.handle.net/1822/27853

Chicago Manual of Style (16^th Edition):

Macedo, Ricardo Joaquim Pereira de. “Reforço da privacidade através do controlo da pegada digital .” 2013. Masters Thesis, Universidade do Minho. Accessed February 28, 2021. http://hdl.handle.net/1822/27853.

MLA Handbook (7^th Edition):

Macedo, Ricardo Joaquim Pereira de. “Reforço da privacidade através do controlo da pegada digital .” 2013. Web. 28 Feb 2021.

Vancouver:

Macedo RJPd. Reforço da privacidade através do controlo da pegada digital . [Internet] [Masters thesis]. Universidade do Minho; 2013. [cited 2021 Feb 28]. Available from: http://hdl.handle.net/1822/27853.

Council of Science Editors:

Macedo RJPd. Reforço da privacidade através do controlo da pegada digital . [Masters Thesis]. Universidade do Minho; 2013. Available from: http://hdl.handle.net/1822/27853

23. Pooda, Herman. Évaluation et comparaison des modèles de contrôle d'accès.

Degree: M. Sc., Informatique, 2016, Université de Sherbrooke

URL: http://www.collectionscanada.gc.ca/obj/thesescanada/vol2/QSHERU/TC-QSHERU-11143_8157.pdf ; http://savoirs.usherbrooke.ca/bitstream/11143/8157/4/Pooda_Herman_MSc_2015.pdf

► La protection des données et de la vie privée des personnes est devenue aujourd’hui un enjeu majeur pour les entreprises et les organisations gouvernementales qui… (more)

Subjects/Keywords: Contrôle d’accès; Dossier santé électronique; Protection de la vie privée; Évaluation des modèles de contrôle d’accès; Comparaison des modèles de contrôle d’accès; RBAC; XACML; SGAC

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Pooda, H. (2016). Évaluation et comparaison des modèles de contrôle d'accès. (Masters Thesis). Université de Sherbrooke. Retrieved from http://www.collectionscanada.gc.ca/obj/thesescanada/vol2/QSHERU/TC-QSHERU-11143_8157.pdf ; http://savoirs.usherbrooke.ca/bitstream/11143/8157/4/Pooda_Herman_MSc_2015.pdf

Chicago Manual of Style (16^th Edition):

Pooda, Herman. “Évaluation et comparaison des modèles de contrôle d'accès.” 2016. Masters Thesis, Université de Sherbrooke. Accessed February 28, 2021. http://www.collectionscanada.gc.ca/obj/thesescanada/vol2/QSHERU/TC-QSHERU-11143_8157.pdf ; http://savoirs.usherbrooke.ca/bitstream/11143/8157/4/Pooda_Herman_MSc_2015.pdf.

MLA Handbook (7^th Edition):

Pooda, Herman. “Évaluation et comparaison des modèles de contrôle d'accès.” 2016. Web. 28 Feb 2021.

Vancouver:

Pooda H. Évaluation et comparaison des modèles de contrôle d'accès. [Internet] [Masters thesis]. Université de Sherbrooke; 2016. [cited 2021 Feb 28]. Available from: http://www.collectionscanada.gc.ca/obj/thesescanada/vol2/QSHERU/TC-QSHERU-11143_8157.pdf ; http://savoirs.usherbrooke.ca/bitstream/11143/8157/4/Pooda_Herman_MSc_2015.pdf.

Council of Science Editors:

Pooda H. Évaluation et comparaison des modèles de contrôle d'accès. [Masters Thesis]. Université de Sherbrooke; 2016. Available from: http://www.collectionscanada.gc.ca/obj/thesescanada/vol2/QSHERU/TC-QSHERU-11143_8157.pdf ; http://savoirs.usherbrooke.ca/bitstream/11143/8157/4/Pooda_Herman_MSc_2015.pdf

Indian Institute of Science

24. Biswas, Arnab Kumar. Securing Multiprocessor Systems-on-Chip.

Degree: PhD, Faculty of Engineering, 2016, Indian Institute of Science

URL: http://etd.iisc.ac.in/handle/2005/2554

► With Multiprocessor Systems-on-Chips (MPSoCs) pervading our lives, security issues are emerging as a serious problem and attacks against these systems are becoming more critical and… (more)

Subjects/Keywords: Network-on-Chip (NoC); Computer Security; Multiprocessor Systems-on-Chips (MPSoCs); MP-SoC; Role Based Access Control (RBAC); Role Based Shared Memory Access Control; MPSoC; Electronics Engineering

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Biswas, A. K. (2016). Securing Multiprocessor Systems-on-Chip. (Doctoral Dissertation). Indian Institute of Science. Retrieved from http://etd.iisc.ac.in/handle/2005/2554

Chicago Manual of Style (16^th Edition):

Biswas, Arnab Kumar. “Securing Multiprocessor Systems-on-Chip.” 2016. Doctoral Dissertation, Indian Institute of Science. Accessed February 28, 2021. http://etd.iisc.ac.in/handle/2005/2554.

MLA Handbook (7^th Edition):

Biswas, Arnab Kumar. “Securing Multiprocessor Systems-on-Chip.” 2016. Web. 28 Feb 2021.

Vancouver:

Biswas AK. Securing Multiprocessor Systems-on-Chip. [Internet] [Doctoral dissertation]. Indian Institute of Science; 2016. [cited 2021 Feb 28]. Available from: http://etd.iisc.ac.in/handle/2005/2554.

Council of Science Editors:

Biswas AK. Securing Multiprocessor Systems-on-Chip. [Doctoral Dissertation]. Indian Institute of Science; 2016. Available from: http://etd.iisc.ac.in/handle/2005/2554

25. MURCIA GUERRERO, IVAN ROLANDO. E-CLOUDS: SERVICIOS EXTENDIDOS .

Degree: 2015, Universidad de los Andes

URL: https://documentodegrado.uniandes.edu.co/documentos/9754.pdf

► Todas las aplicaciones necesitan una funcionalidad de gestión de usuarios, la cual podría ser de un solo usuario, multi-usuario, multi-tenant en el caso de la… (more)

Subjects/Keywords: Manejo de usuarios; SaaS; E-clouds; aplicaciones científicas; RBAC; restricciones; marketplace.

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

MURCIA GUERRERO, I. R. (2015). E-CLOUDS: SERVICIOS EXTENDIDOS . (Thesis). Universidad de los Andes. Retrieved from https://documentodegrado.uniandes.edu.co/documentos/9754.pdf

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

MURCIA GUERRERO, IVAN ROLANDO. “E-CLOUDS: SERVICIOS EXTENDIDOS .” 2015. Thesis, Universidad de los Andes. Accessed February 28, 2021. https://documentodegrado.uniandes.edu.co/documentos/9754.pdf.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

MURCIA GUERRERO, IVAN ROLANDO. “E-CLOUDS: SERVICIOS EXTENDIDOS .” 2015. Web. 28 Feb 2021.

Vancouver:

MURCIA GUERRERO IR. E-CLOUDS: SERVICIOS EXTENDIDOS . [Internet] [Thesis]. Universidad de los Andes; 2015. [cited 2021 Feb 28]. Available from: https://documentodegrado.uniandes.edu.co/documentos/9754.pdf.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

MURCIA GUERRERO IR. E-CLOUDS: SERVICIOS EXTENDIDOS . [Thesis]. Universidad de los Andes; 2015. Available from: https://documentodegrado.uniandes.edu.co/documentos/9754.pdf

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Luleå University of Technology

26. Carlsson, Joachim. Business Intelligence Access Control : Utvecklande av en behörighetsmodell för Business Intelligence.

Degree: 2015, Luleå University of Technology

URL: http://urn.kb.se/resolve?urn=urn:nbn:se:ltu:diva-55855

Validerat; 20150616 (global_studentproject_submitter)

Subjects/Keywords: Technology; Teknik; Business Intelligence; BI; Access Control; DAC; MAC; RBAC; Qlikview

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Carlsson, J. (2015). Business Intelligence Access Control : Utvecklande av en behörighetsmodell för Business Intelligence. (Thesis). Luleå University of Technology. Retrieved from http://urn.kb.se/resolve?urn=urn:nbn:se:ltu:diva-55855

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Carlsson, Joachim. “Business Intelligence Access Control : Utvecklande av en behörighetsmodell för Business Intelligence.” 2015. Thesis, Luleå University of Technology. Accessed February 28, 2021. http://urn.kb.se/resolve?urn=urn:nbn:se:ltu:diva-55855.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Carlsson, Joachim. “Business Intelligence Access Control : Utvecklande av en behörighetsmodell för Business Intelligence.” 2015. Web. 28 Feb 2021.

Vancouver:

Carlsson J. Business Intelligence Access Control : Utvecklande av en behörighetsmodell för Business Intelligence. [Internet] [Thesis]. Luleå University of Technology; 2015. [cited 2021 Feb 28]. Available from: http://urn.kb.se/resolve?urn=urn:nbn:se:ltu:diva-55855.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Carlsson J. Business Intelligence Access Control : Utvecklande av en behörighetsmodell för Business Intelligence. [Thesis]. Luleå University of Technology; 2015. Available from: http://urn.kb.se/resolve?urn=urn:nbn:se:ltu:diva-55855

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Linköping University

27. Falkcrona, Jerry. Role-based access control and single sign-on for Web services.

Degree: Electrical Engineering, 2008, Linköping University

URL: http://urn.kb.se/resolve?urn=urn:nbn:se:liu:diva-11224

► Nowadays, the need for sharing information between different systems in a secure manner is common, not only in the corporate world but also in… (more)

Subjects/Keywords: DACS; Single signon; RBAC; Web services; authentication; Information Systems; Systemvetenskap, informationssystem och informatik

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Falkcrona, J. (2008). Role-based access control and single sign-on for Web services. (Thesis). Linköping University. Retrieved from http://urn.kb.se/resolve?urn=urn:nbn:se:liu:diva-11224

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Falkcrona, Jerry. “Role-based access control and single sign-on for Web services.” 2008. Thesis, Linköping University. Accessed February 28, 2021. http://urn.kb.se/resolve?urn=urn:nbn:se:liu:diva-11224.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Falkcrona, Jerry. “Role-based access control and single sign-on for Web services.” 2008. Web. 28 Feb 2021.

Vancouver:

Falkcrona J. Role-based access control and single sign-on for Web services. [Internet] [Thesis]. Linköping University; 2008. [cited 2021 Feb 28]. Available from: http://urn.kb.se/resolve?urn=urn:nbn:se:liu:diva-11224.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Falkcrona J. Role-based access control and single sign-on for Web services. [Thesis]. Linköping University; 2008. Available from: http://urn.kb.se/resolve?urn=urn:nbn:se:liu:diva-11224

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Université de Sherbrooke

28. Pooda, Herman. Évaluation et comparaison des modèles de contrôle d'accès.

Degree: 2016, Université de Sherbrooke

URL: http://hdl.handle.net/11143/8157

► La protection des données et de la vie privée des personnes est devenue aujourd’hui un enjeu majeur pour les entreprises et les organisations gouvernementales qui… (more)

Subjects/Keywords: Contrôle d’accès; Dossier santé électronique; Protection de la vie privée; Évaluation des modèles de contrôle d’accès; Comparaison des modèles de contrôle d’accès; RBAC; XACML; SGAC

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Pooda, H. (2016). Évaluation et comparaison des modèles de contrôle d'accès. (Masters Thesis). Université de Sherbrooke. Retrieved from http://hdl.handle.net/11143/8157

Chicago Manual of Style (16^th Edition):

Pooda, Herman. “Évaluation et comparaison des modèles de contrôle d'accès.” 2016. Masters Thesis, Université de Sherbrooke. Accessed February 28, 2021. http://hdl.handle.net/11143/8157.

MLA Handbook (7^th Edition):

Pooda, Herman. “Évaluation et comparaison des modèles de contrôle d'accès.” 2016. Web. 28 Feb 2021.

Vancouver:

Pooda H. Évaluation et comparaison des modèles de contrôle d'accès. [Internet] [Masters thesis]. Université de Sherbrooke; 2016. [cited 2021 Feb 28]. Available from: http://hdl.handle.net/11143/8157.

Council of Science Editors:

Pooda H. Évaluation et comparaison des modèles de contrôle d'accès. [Masters Thesis]. Université de Sherbrooke; 2016. Available from: http://hdl.handle.net/11143/8157

Delft University of Technology

29. Spiele, P.A. (author). Role Based Access Control Heineken Netherlands.

Degree: 2009, Delft University of Technology

URL: http://resolver.tudelft.nl/uuid:d348ecc7-10a3-4517-9c88-934d3778bf8d

►

The administration of users and their related permissions in the IT environment is a complex and expensive task. The growing number and variety of applications,… (more)

▼

The administration of users and their related permissions in the IT environment is a complex and expensive task. The growing number and variety of applications, combined with the manual administration of related permissions results in an enormous administrative burden and lack of control. An effect of this situation is the accumulation of permissions by the employees, causing significant security risks. The implementation of Identity and Access Management (IAM) provides a solution for this undesired situation. Heineken Netherlands therefore initiated the IAM-project. Business drives for this IAM-project are; business facilitation, cost containment, operational efficiency, risk management, governance, and regulatory compliance. The identity management part of IAM focuses on the question who the user is, the access management part focuses on what the user is allowed to do. The use of Role Based Access Control (RBAC) for the realization of access management is common practice. Roles in such a role model can be seen as an abstraction of the user-permission relationship. The creation of a role model proved to be the major hurdle for the implementation of RBAC. For this purpose the RBAC-project was initiated at Heineken Netherlands, resulting in this report. The project started with the analysis of existing literature and best practices, resulting in a new RBAC terminology and the selection of four approaches for the design of a role model. Furthermore, the Heineken organization was analyzed, resulting in nine perspectives of which three were selected to form the foundations of the roles. Heineken preferred a hybrid approach for the design of the role model; however, a methodology for a hybrid approach was not yet described in literature before. Therefore a hybrid methodology was designed, containing seven steps to create the role model. As a part of the hybrid methodology, a new optimization algorithm was also introduced. The project continued with the customization of the hybrid methodology by incorporating the selected approaches and perspectives, resulting in the final Heineken Methodology. The validation of the Heineken methodology was done by conducting a pilot project at the Accounts Receivable Department of the Financial Shared Services Center. In conclusion, the RBAC-project provided a well founded, customized, and validated Heineken methodology to design the desired companywide role model. To my knowledge this is the first described study which implements a truly hybrid approach making use of a newly developed terminology and optimization algorithm. The implementation of the Heineken methodology within the pilot area resulted in a role model with 8 roles for 64 employees, reducing the number of assignments by 70%. This low number of roles and assignments enhances the control and maintainability of the role model and access management in general. The role model is now fully implemented as part of the IAM-project of Heineken Netherlands.

Software Technology

Electrical Engineering, Mathematics and Computer…

Advisors/Committee Members: Dietz, J.L.G. (mentor).

Subjects/Keywords: IAM; RBAC; Heineken; Role based access control; Identity and Access Management

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Spiele, P. A. (. (2009). Role Based Access Control Heineken Netherlands. (Masters Thesis). Delft University of Technology. Retrieved from http://resolver.tudelft.nl/uuid:d348ecc7-10a3-4517-9c88-934d3778bf8d

Chicago Manual of Style (16^th Edition):

Spiele, P A (author). “Role Based Access Control Heineken Netherlands.” 2009. Masters Thesis, Delft University of Technology. Accessed February 28, 2021. http://resolver.tudelft.nl/uuid:d348ecc7-10a3-4517-9c88-934d3778bf8d.

MLA Handbook (7^th Edition):

Spiele, P A (author). “Role Based Access Control Heineken Netherlands.” 2009. Web. 28 Feb 2021.

Vancouver:

Spiele PA(. Role Based Access Control Heineken Netherlands. [Internet] [Masters thesis]. Delft University of Technology; 2009. [cited 2021 Feb 28]. Available from: http://resolver.tudelft.nl/uuid:d348ecc7-10a3-4517-9c88-934d3778bf8d.

Council of Science Editors:

Spiele PA(. Role Based Access Control Heineken Netherlands. [Masters Thesis]. Delft University of Technology; 2009. Available from: http://resolver.tudelft.nl/uuid:d348ecc7-10a3-4517-9c88-934d3778bf8d

30. Komlenovic, Marko. A Platform for Assessing the Efficiency of Distributed Access Enforcement in Role Based Access Control (RBAC) and its Validation.

Degree: 2011, University of Waterloo

URL: http://hdl.handle.net/10012/5731

► We consider the distributed access enforcement problem for Role-Based Access Control (RBAC) systems. Such enforcement has become important with RBAC's increasing adoption, and the proliferation… (more)

Subjects/Keywords: Role Based Access Control; Distributed Access Enforcement in RBAC; RBAC; CPOL; Access Matrix; Directed Graph; Reference monitor; Access control policy

…Control (RBAC) [2, 3]. RBAC is becoming the de-facto standard for access… …control in enterprise settings. In RBAC, rather than assigning a user directly to permissions… …with one another in a partial ordering called a role-hierarchy. An example of an RBAC policy… …is shown in Figure 2. 1 Figure 2 - An Example of RBAC policy. Users are shown in diamonds… …context of RBAC. In RBAC, a user exercises permissions in sessions. A session is associated with…

10 more images…

Record Details Similar Records Cite « Share

❌

APA · Chicago · MLA · Vancouver · CSE | Export to Zotero / EndNote / Reference Manager

APA (6^th Edition):

Komlenovic, M. (2011). A Platform for Assessing the Efficiency of Distributed Access Enforcement in Role Based Access Control (RBAC) and its Validation. (Thesis). University of Waterloo. Retrieved from http://hdl.handle.net/10012/5731

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Chicago Manual of Style (16^th Edition):

Komlenovic, Marko. “A Platform for Assessing the Efficiency of Distributed Access Enforcement in Role Based Access Control (RBAC) and its Validation.” 2011. Thesis, University of Waterloo. Accessed February 28, 2021. http://hdl.handle.net/10012/5731.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

MLA Handbook (7^th Edition):

Komlenovic, Marko. “A Platform for Assessing the Efficiency of Distributed Access Enforcement in Role Based Access Control (RBAC) and its Validation.” 2011. Web. 28 Feb 2021.

Vancouver:

Komlenovic M. A Platform for Assessing the Efficiency of Distributed Access Enforcement in Role Based Access Control (RBAC) and its Validation. [Internet] [Thesis]. University of Waterloo; 2011. [cited 2021 Feb 28]. Available from: http://hdl.handle.net/10012/5731.

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

Council of Science Editors:

Komlenovic M. A Platform for Assessing the Efficiency of Distributed Access Enforcement in Role Based Access Control (RBAC) and its Validation. [Thesis]. University of Waterloo; 2011. Available from: http://hdl.handle.net/10012/5731

Note: this citation may be lacking information needed for this citation format:
Not specified: Masters Thesis or Doctoral Dissertation

		in
And / Or
		in
And / Or
		in
And / Or
		in

Open Access Theses and Dissertations